Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/af68e7a2-3789-366d-827b-0ff7101bdaca.roa
File:                     af68e7a2-3789-366d-827b-0ff7101bdaca.roa (raw, json)
Hash identifier:          O7Z/u9HwP2CvZwp3QwndLs8V3+/EKFyQmpfF/LvwXmA=
Subject key identifier:   C7:F2:88:24:CA:BA:EF:FF:77:53:97:C0:CC:27:30:16:62:72:A0:D0
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F4328576D51CC73C042CFC17294C1A42A
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/af68e7a2-3789-366d-827b-0ff7101bdaca.roa
Signing time:             Mon 08 Jun 2020 16:26:57 +0000
ROA not before:           Mon 08 Jun 2020 04:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     32391
IP address blocks:        2604:7100::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:94:c1:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: Jun  8 04:00:00 2020 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=4c35ed0b-e8f2-4bbe-a97f-e2aca29954cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:88:a0:25:7e:e2:80:e7:80:20:bf:96:66:
                    a9:88:39:a5:85:af:fd:c7:cd:63:13:47:b9:ef:78:
                    7d:7a:40:6f:ca:22:d5:c3:0c:12:55:2c:ff:75:fb:
                    92:5b:13:f3:3c:5c:11:ff:02:9d:0a:39:2f:0e:4f:
                    d8:32:50:d7:04:ff:43:cb:7a:b2:37:74:9f:27:c6:
                    8c:c5:f9:84:76:5c:6b:b4:df:dd:b5:d6:7c:e9:9e:
                    05:bb:3d:26:73:c6:61:d7:40:bc:0d:3f:13:05:11:
                    9b:91:f2:b8:43:de:55:e3:f4:fb:87:07:00:16:96:
                    3f:4d:9a:4f:54:89:10:df:47:eb:34:a5:ec:b2:6a:
                    c4:f2:c6:98:25:29:f1:c0:80:db:ab:ee:90:30:36:
                    57:31:d2:a5:bc:fb:ed:13:20:35:c1:b2:12:14:05:
                    a0:35:01:0b:6d:f1:42:36:b0:7a:4a:27:47:ce:9b:
                    3b:64:8d:4d:97:d2:a0:1b:a5:2a:d1:53:a5:a9:5b:
                    39:27:07:af:99:bf:cc:09:7c:4f:13:71:6d:97:46:
                    74:48:17:80:6c:f9:81:d0:be:31:8f:f0:23:b2:6a:
                    f1:72:83:2b:9e:2d:69:30:f6:2b:79:90:09:64:68:
                    10:c9:ef:65:21:8a:64:7e:f9:27:af:b9:da:d8:c5:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F2:88:24:CA:BA:EF:FF:77:53:97:C0:CC:27:30:16:62:72:A0:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/af68e7a2-3789-366d-827b-0ff7101bdaca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f3:c2:88:78:3d:cb:3b:25:ca:a4:ef:9c:00:9b:14:d3:c4:
         ce:c1:cb:c4:a0:e6:48:8e:dd:97:de:d5:7e:ac:de:13:8e:19:
         10:08:c2:91:5a:3e:61:c1:32:af:b2:48:6f:24:cd:39:fd:38:
         2c:59:77:24:b9:d8:7c:ec:12:ff:21:a2:65:10:9b:99:22:b3:
         6a:e3:ca:00:aa:1f:23:b2:8d:85:75:66:e6:9f:83:34:7c:61:
         29:2a:74:8b:ca:24:10:2d:ae:07:3d:6a:27:b9:cd:bb:15:53:
         9a:57:0c:14:90:65:18:24:d4:30:4b:27:0d:f8:37:5c:67:d1:
         21:2d:d7:9e:8e:a0:ee:bd:c4:af:f1:9c:eb:9a:05:fb:c9:31:
         d4:8c:c0:0d:49:88:fa:fd:c7:ce:2e:3d:3d:55:e8:68:56:1f:
         bb:21:13:7b:07:05:3c:6f:5c:9b:a8:8f:41:d0:a3:56:76:b2:
         84:a4:1f:af:82:f9:9e:99:8b:f6:ad:d7:c7:c1:08:07:ff:27:
         a3:77:23:83:8f:67:7b:a7:8b:c4:b3:de:9f:01:ca:fb:e0:4d:
         03:f0:7d:13:54:20:b6:eb:0b:d3:e6:cc:d3:71:76:cf:7b:3a:
         8b:89:24:a6:00:9d:77:ce:99:3c:d8:ca:5b:c7:df:d4:33:f7:
         3d:b6:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----